Hi Jaisuryan
Thanks for your response. MX_RECONCILE is set to false.
I have two clients - one with distributed provisioning using GRC framework and works fine when I assign a BR to a user. However when I change the same BR and add a new privilege (SAP role) to it, the change is reflected in IdM but the additional sap role does not get provisioned to the user in the backend SAP system.
The second client does not use GRC for provisioning. The provisioning occurs through idm and is a very standard set up. However I have the same issue as explained above.
The MX_ADD/DEL_MEMBER_TASK at the repository level is not set to -1. They have the provisioning and de-provisioning tasks assigned respectively. Where else should I check this? Please could you provide me a screenshot.
With your final suggestion to add attributes to the privilege, do these attributes need to be added to the entry type MX_PRIVILEGE. I have checked and these attributes are already "allowed" for MX_PRIVILEGE. Please could you provide me more detail of what you meant.
Thanks
Ranjit